Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
File: zQPRPdJvAESig_xqEedWoqK1aRs.mft (raw, json)
Hash identifier: 29KPKaX+figlELSTUBTyYIJEi3VcF3y96T+fboECt0Q=
Subject key identifier: D9:9E:35:9E:2A:40:AD:61:31:0B:B3:A0:E8:02:F4:FE:53:08:13:D2
Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
Certificate issuer: /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Certificate serial: 01A17D05BE594158B605AD3C1EE7F1DE0C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
Manifest number: 05CB
Signing time: Tue 27 Oct 2026 11:01:30 +0000
Manifest this update: Tue 27 Oct 2026 11:01:30 +0000
Manifest next update: Wed 28 Oct 2026 11:01:30 +0000
Files and hashes: 1: DV_1PU5sghttOAyD5Fk0auja6M4.roa (hash: vyYX2XFHKs4PfXvL2MDa+XaKNUQzIY/+9Y9TmVp9CiU=)
2: zQPRPdJvAESig_xqEedWoqK1aRs.crl (hash: D+T6SKQMGE9KcPTTqpNdS2NjiPoc1nw9CvE7w/iv3R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:be:59:41:58:b6:05:ad:3c:1e:e7:f1:de:0c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Validity
Not Before: Oct 27 11:01:30 2026 GMT
Not After : Oct 28 11:01:30 2026 GMT
Subject: CN=d99e359e2a40ad61310bb3a0e802f4fe530813d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5d:90:32:90:44:32:d8:27:b3:e4:c2:e5:66:
f9:25:b4:d1:59:ba:83:e1:cd:5d:f7:55:f1:ea:d2:
bc:17:f3:3b:af:8d:07:34:80:64:f5:1f:00:aa:ce:
09:83:8b:f1:7a:a3:1f:a6:cf:1d:da:bf:b2:e7:1c:
8b:60:1b:1c:1f:a5:80:a8:47:29:87:d3:8f:7b:46:
4f:f8:26:bd:38:4c:bf:9e:9e:35:d7:67:eb:d3:51:
81:3e:43:85:55:17:2c:da:e2:3f:f4:46:10:e9:fd:
18:74:9c:95:75:68:75:b6:12:dc:dd:0d:5f:4c:a4:
d5:48:bb:04:2b:2a:f7:6c:4c:7e:3c:5f:9e:1c:ed:
05:49:5d:b0:a4:d6:fd:9d:ea:f9:52:d5:37:4f:4f:
85:ca:d3:49:c9:43:5d:33:29:67:0d:0d:9f:f7:97:
be:58:11:f3:4e:37:33:c3:a0:ce:10:46:15:f9:d0:
b6:cf:71:a1:8b:f6:2c:30:14:67:69:2d:f7:66:63:
87:2c:c6:ec:71:15:dc:0e:0a:ee:94:fa:9a:79:83:
3d:3b:ba:e2:3e:bf:f4:38:59:7c:bd:7a:c4:54:34:
86:9f:90:fb:3d:fa:69:90:6e:0e:35:2d:10:00:32:
a9:1a:bb:a2:e9:17:b8:f8:ad:7d:af:3a:fc:bb:ed:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9E:35:9E:2A:40:AD:61:31:0B:B3:A0:E8:02:F4:FE:53:08:13:D2
X509v3 Authority Key Identifier:
keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:cd:fe:dd:4f:8c:47:7a:6c:11:2b:45:cc:94:09:a4:2d:03:
77:8a:6a:84:b5:34:0a:c4:fb:78:f7:ec:de:e3:9f:cd:27:95:
0e:d6:02:6b:e9:d6:64:69:cf:b9:6a:c2:f1:54:24:79:7b:3c:
b5:eb:0c:2f:26:d6:17:94:86:d9:73:30:d8:eb:ed:3e:e6:a9:
2b:25:78:6d:ec:54:ed:2c:85:d9:3e:20:8c:f5:29:06:87:f7:
5d:05:00:74:69:67:c9:91:ec:28:c3:88:28:c1:f7:cc:98:80:
ee:75:1b:b4:fa:4c:2b:74:2e:d6:3d:ee:38:c7:48:a8:f6:9c:
d1:42:cd:75:ac:42:bc:11:74:c1:4d:68:d4:73:8e:d7:4e:d5:
d3:78:89:4e:7c:72:a3:bb:61:59:98:9a:c8:d2:50:f9:ad:d9:
1a:6b:64:80:9e:9b:ee:a4:9d:18:e9:32:86:2b:7f:e4:e2:b7:
97:f2:79:2d:45:1c:25:02:33:f1:ce:67:31:46:1a:32:7e:ad:
3b:44:4b:e3:72:54:5b:9b:5d:01:1b:25:8a:43:da:3f:a0:9d:
67:c9:6f:92:db:06:9c:d0:e2:c8:64:63:80:f0:09:34:5a:95:
10:cf:ec:7a:c4:b8:42:af:6e:68:cd:5a:c0:41:e2:09:88:09:
1e:5e:30:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:24:29 2026 by rpki-client